CatchAll-Mail user's INBOX contains thousands of Mailsize emails

I have searched everywhere and the only reason I have found for this is someone edited the /etc/aliases file. I haven't done this and the catchall-mail user for each website is getting tons of these emails. how do I fix this?